CSSLP Practice Test

CSSLP Practice Test practice questions, page 4 of 14, with answer review and explanations.

Question 16

Which of the following individuals inspects whether the security policies, standards, guidelines, and procedures are efficiently performed in accordance with the company's stated security objectives?

  1. Information system security professional
  2. Data owner
  3. Senior management
  4. Information system auditor

Question 17

Which of the following process areas does the SSE-CMM define in the 'Project and Organizational Practices' category? Each correct answer represents a complete solution. Choose all that apply.

  1. Provide Ongoing Skills and Knowledge
  2. Verify and Validate Security
  3. Manage Project Risk
  4. Improve Organization's System Engineering Process

Question 18

The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include? Each correct answer represents a part of the solution. Choose all that apply.

  1. Remediation of a particular vulnerability
  2. Cost-benefit examination of countermeasures
  3. Identification of vulnerabilities
  4. Assessment of attacks

Question 19

You work as a Security Manager for Tech Perfect Inc. You have set up a SIEM server for the following purposes: Analyze the data from different log sources Correlate the events among the log entries Identify and prioritize significant events Initiate responses to events if required One of your log monitoring staff wants to know the features of SIEM product that will help them in these purposes. What features will you recommend? Each correct answer represents a complete solution. Choose all that apply.

  1. Asset information storage and correlation
  2. Transmission confidentiality protection
  3. Incident tracking and reporting
  4. Security knowledge base
  5. Graphical user interface

Question 20

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply.

  1. VI Vulnerability and Incident Management
  2. Information systems acquisition, development, and maintenance
  3. DC Security Design & Configuration
  4. EC Enclave and Computing Environment